Start for Free
HIGH 8.2 Go

Gitea allows attackers to add attachments with forbidden file extensions

GHSA-263q-5cv3-xq9g · BIT-gitea-2025-68939 · CVE-2025-68939 · GO-2025-4261

Published · Modified

Description

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes